System and method for tracking and auditing data access in a network environment
AssigneeDatiphy Inc.
InventorYeejang James Lin
Life of this patent
Estimating the term…
Abstract
A system and method that correlate business transaction in a system and traffic generated from this business transaction in a network back to a user identity that invoked this business transaction and generated subsequent network traffic. The method enables a user to set up rules for tracking the activities in a system and network traffic and these rules can then be used later for monitoring user activities. The user activities, network traffic, and the user identity are correlated and stored in a data-to-business mapping file. This data-to-business mapping file can be used for auditing events in the system.
Claims20
A method for creating a rule for tracking user access in a network system, comprising the steps of:
- recording, by a tracking server, identification of an entry point to the network system;
- activating an application with a user identification known to the tracking server;
- tracking, by the tracking server, network transactions associated with the known user identification on the network system;
- recording, by the tracking server, identification of a connection, associated with the network transactions, between servers;
- and
- associating the identification of the connection with the identification of the entry point and an identification of the application.
A server for tracking user activities in a network system, comprising:
- a network interface unit for monitoring network traffic;
- an audit policy unit for controlling rules;
- a database tracking unit for database access requests and responses;
- a control unit;
- and
- a storage unit in which a non-transitory computer program is stored, wherein when the non-transitory computer program is executed by the control unit, the server performs the steps of:
- recording, by a tracking server, identification of an entry point to the network system;
- activating an application with a user identification known to the tracking server;
- tracking, by the tracking server, network transactions associated with the known user identification on the network system;
- recording, by the tracking server, identification of a connection, associated with the network transactions, between servers;
- and
- associating the identification of the connection with the identification of the entry point and an identification of the application.
Dependencies are inferred from the claim text.